General

  • Target

    a31df16510d93d5c0289a1013fd7b4e0N

  • Size

    236KB

  • Sample

    240911-bexf2swanf

  • MD5

    a31df16510d93d5c0289a1013fd7b4e0

  • SHA1

    d26fe1b86f3a9b683caab3f850ce6a12b8e26896

  • SHA256

    b34e58ec10c91b8c8e8d71f7ab9906a463ca89a51915fd98dee54b89be9960a3

  • SHA512

    b8c0698bea96e90f0b90cc80121dc926672d1ac405c8cb9bcaeade0158392f00b5df1b5e042600f83eafe1af4c7faad23cd997f2b03e8e821741cfd6cd7cbdea

  • SSDEEP

    6144:i1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:i1GmSafShjYdd96z/6cwdC

Malware Config

Extracted

Family

dridex

Botnet

111

C2

52.73.70.149:443

8.4.9.152:3786

185.246.87.202:3098

50.116.111.64:5353

rc4.plain
rc4.plain

Targets

    • Target

      a31df16510d93d5c0289a1013fd7b4e0N

    • Size

      236KB

    • MD5

      a31df16510d93d5c0289a1013fd7b4e0

    • SHA1

      d26fe1b86f3a9b683caab3f850ce6a12b8e26896

    • SHA256

      b34e58ec10c91b8c8e8d71f7ab9906a463ca89a51915fd98dee54b89be9960a3

    • SHA512

      b8c0698bea96e90f0b90cc80121dc926672d1ac405c8cb9bcaeade0158392f00b5df1b5e042600f83eafe1af4c7faad23cd997f2b03e8e821741cfd6cd7cbdea

    • SSDEEP

      6144:i1G3WVIOY6Bdjehj+qudd96ou/6mv5wdC:i1GmSafShjYdd96z/6cwdC

    • Dridex

      Dridex(known as Bugat/Cridex) is a form of malware that specializes in stealing bank credentials.

    • Dridex Loader

      Detects Dridex both x86 and x64 loader in memory.

MITRE ATT&CK Enterprise v15

Tasks